Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a323030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a323030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          NX/JPIz+CwIhnX4X1qgNzZJrlcymJsV/b1nMx86BNrg=
Subject key identifier:   B4:82:73:63:B1:F9:09:F5:57:B5:A0:06:79:E8:D3:53:D1:EF:07:57
Certificate issuer:       /CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
Certificate serial:       668536746921604EE699AF0ED2E6CC5915A7A186
Authority key identifier: 79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a323030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Thu 16 May 2024 17:05:27 +0000
ROA not before:           Thu 16 May 2024 17:00:27 +0000
ROA not after:            Thu 15 May 2025 17:05:27 +0000
asID:                     270760
IP address blocks:        2804:70fc:2000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:85:36:74:69:21:60:4e:e6:99:af:0e:d2:e6:cc:59:15:a7:a1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4
        Validity
            Not Before: May 16 17:00:27 2024 GMT
            Not After : May 15 17:05:27 2025 GMT
        Subject: CN=B4827363B1F909F557B5A00679E8D353D1EF0757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:66:ed:52:60:11:2b:03:47:25:da:4c:7e:
                    74:74:fb:e5:b9:90:7e:ae:56:0b:04:bc:5e:3f:01:
                    b3:c1:c0:f7:56:b6:a1:bf:51:5f:e3:6c:93:6d:f1:
                    3a:23:6a:6e:5f:47:88:53:4c:af:d0:53:d7:c6:6b:
                    1e:fa:52:b9:ef:b5:4c:2c:75:c4:0e:91:a9:b4:80:
                    3a:52:b6:04:70:bc:a3:47:73:18:ad:50:ab:92:ce:
                    95:c9:06:43:26:72:9e:9f:92:82:52:1f:de:ba:eb:
                    03:66:19:4c:e6:bd:15:ae:b4:2c:01:b1:34:d6:53:
                    c6:f7:c7:fc:f9:b9:be:71:cd:a4:ce:9d:20:ee:68:
                    e0:f7:a8:51:81:52:ae:d0:6d:0a:47:1f:49:81:47:
                    ef:50:49:78:d7:14:a7:34:c3:3d:35:2f:10:c8:fa:
                    93:94:81:63:91:5c:ce:68:fd:bf:90:e3:b6:29:59:
                    7b:be:50:5c:1f:be:5a:36:09:26:33:1f:4a:f9:40:
                    b0:cc:b1:f2:bd:9e:9f:bd:32:6d:b3:e5:67:0e:55:
                    11:ec:df:cd:a4:2a:0e:d5:1c:e0:36:c9:6d:df:71:
                    b3:d0:3c:5e:16:bb:5d:76:c9:62:48:39:59:cb:63:
                    93:86:49:a1:89:13:29:2a:40:fe:ae:d4:6f:a7:2b:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:82:73:63:B1:F9:09:F5:57:B5:A0:06:79:E8:D3:53:D1:EF:07:57
            X509v3 Authority Key Identifier:
                keyid:79:C6:B5:C6:95:A0:1C:F7:EB:BB:E7:EC:D0:74:98:36:B7:DA:14:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79C6B5C695A01CF7EBBBE7ECD0749836B7DA14D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a323030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:53:98:aa:a8:6f:b2:f4:d0:c4:05:53:04:1d:bb:f1:87:
         4d:58:33:59:5d:56:73:28:2d:72:ff:d1:e1:9f:82:4d:38:40:
         ad:53:0b:b7:4c:81:81:4e:62:2b:52:b2:55:dd:5a:24:99:42:
         ba:bc:bb:bd:f9:2e:89:bf:75:44:d3:32:4f:25:4c:e4:eb:77:
         88:e8:44:7f:1d:e8:c9:18:65:9e:2f:81:d7:d7:ff:78:ee:09:
         ab:b3:cf:4c:7b:eb:06:a7:01:89:03:4b:8e:a4:6f:4f:17:a3:
         31:e9:b6:8d:fe:5f:28:1a:5b:ba:3d:f9:ab:b7:5f:d3:76:21:
         10:46:e5:06:8b:5e:ed:e9:f3:c1:65:fa:79:d6:35:a5:1f:80:
         59:2a:27:3c:da:74:e8:d5:5b:6b:96:c3:37:5f:06:9a:12:a2:
         c5:d5:fc:55:41:ab:77:d0:b6:1a:05:ea:01:13:42:5c:08:9d:
         46:8a:9a:45:fc:3a:a6:bb:00:c9:9c:0b:b6:c5:00:b0:fb:c2:
         9c:aa:4b:b2:92:39:ea:49:4a:33:87:a9:85:57:a0:bc:7c:47:
         d4:ef:ee:59:18:0e:59:50:ff:33:77:a7:bb:9a:d1:e6:cc:67:
         e3:b8:bb:d3:b0:22:27:d2:78:db:de:0b:13:58:ed:d3:82:4f:
         03:de:b7:58
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUZoU2dGkhYE7mma8O0ubMWRWnoYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlDNkI1QzY5NUEwMUNGN0VCQkJFN0VDRDA3NDk4MzZC
N0RBMTRENDAeFw0yNDA1MTYxNzAwMjdaFw0yNTA1MTUxNzA1MjdaMDMxMTAvBgNV
BAMTKEI0ODI3MzYzQjFGOTA5RjU1N0I1QTAwNjc5RThEMzUzRDFFRjA3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UGbtUmARKwNHJdpMfnR0++W5
kH6uVgsEvF4/AbPBwPdWtqG/UV/jbJNt8Tojam5fR4hTTK/QU9fGax76UrnvtUws
dcQOkam0gDpStgRwvKNHcxitUKuSzpXJBkMmcp6fkoJSH9666wNmGUzmvRWutCwB
sTTWU8b3x/z5ub5xzaTOnSDuaOD3qFGBUq7QbQpHH0mBR+9QSXjXFKc0wz01LxDI
+pOUgWORXM5o/b+Q47YpWXu+UFwfvlo2CSYzH0r5QLDMsfK9np+9Mm2z5WcOVRHs
382kKg7VHOA2yW3fcbPQPF4Wu112yWJIOVnLY5OGSaGJEykqQP6u1G+nKy0DAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUtIJzY7H5CfVXtaAGeejTU9HvB1cwHwYDVR0j
BBgwFoAUeca1xpWgHPfru+fs0HSYNrfaFNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXgxREJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFl
VU0vMC83OUM2QjVDNjk1QTAxQ0Y3RUJCQkU3RUNEMDc0OTgzNkI3REExNEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5QzZCNUM2OTVBMDFDRjdF
QkJCRTdFQ0QwNzQ5ODM2QjdEQTE0RDQuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV4MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAv
MzIzODMwMzQzYTM3MzA2NjYzM2EzMjMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDMyMzczMDM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCgEcPwgMA0GCSqGSIb3DQEBCwUA
A4IBAQAcIVOYqqhvsvTQxAVTBB278YdNWDNZXVZzKC1y/9Hhn4JNOECtUwu3TIGB
TmIrUrJV3VokmUK6vLu9+S6Jv3VE0zJPJUzk63eI6ER/HejJGGWeL4HX1/947gmr
s89Me+sGpwGJA0uOpG9PF6Mx6baN/l8oGlu6Pfmrt1/TdiEQRuUGi17t6fPBZfp5
1jWlH4BZKic82nTo1VtrlsM3XwaaEqLF1fxVQat30LYaBeoBE0JcCJ1GippF/Dqm
uwDJnAu2xQCw+8KcqkuykjnqSUozh6mFV6C8fEfU7+5ZGA5ZUP8zd6e7mtHmzGfj
uLvTsCIn0njb3gsTWO3Tgk8D3rdY
-----END CERTIFICATE-----
Generated at Sat Jul 27 13:09:44 2024 by rpki-client on console-fra.rpki-client.org